Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: WvhWEsUZ0u9Z/4nZL00GAwzpkFKHSjvLoNUn+pd64Ac=
Subject key identifier: 10:34:98:54:37:52:2F:8E:9D:12:98:A5:90:A9:69:D9:91:53:76:88
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 0194BD179FC1E4BD6CC52D96926022103AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: ZuXj2DTd4adDjmK6R9Bg7jMalPlUKe9RfsoMaRL+0hA=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9f:c1:e4:bd:6c:c5:2d:96:92:60:22:10:3a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=1034985437522f8e9d1298a590a969d991537688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:e9:a1:22:35:b1:f5:b3:87:72:d8:a2:98:
11:61:4d:08:b0:33:e5:8d:1b:2e:d2:2b:cc:13:c4:
34:aa:b7:d3:ce:1c:d1:3a:70:8d:5c:31:61:45:01:
cb:8e:98:a6:a6:00:26:7f:0c:54:f9:02:dc:5a:19:
56:81:54:2d:ea:6d:ac:04:f6:2d:02:1b:f1:8b:81:
e7:3e:d3:17:d1:a7:fd:fe:8f:59:fb:e8:0f:f2:1a:
f0:91:42:f0:dc:26:45:d5:10:95:d1:7a:3a:d2:c3:
3e:0e:4e:f3:64:02:ce:86:01:87:93:b4:72:d6:d8:
10:d9:a9:70:c7:e4:8e:59:ff:9c:26:a6:86:6e:d2:
8e:89:94:f3:84:1e:75:3c:d1:9c:69:37:50:f9:a0:
62:7b:73:12:9b:fd:84:c1:be:26:01:2c:c1:82:08:
d3:02:b3:d0:5f:36:88:78:b4:30:60:b2:86:58:c0:
69:c6:08:40:98:1d:eb:0c:f0:83:54:f6:3f:67:ab:
9d:9f:19:b1:da:10:2c:53:9d:cf:cf:2f:ef:83:e5:
15:82:13:0a:0e:25:3c:be:c2:60:16:5b:7f:ec:00:
18:07:e9:1f:7c:3d:28:7a:76:31:7c:9c:75:dd:8a:
aa:26:d9:53:cb:45:8b:d9:22:7f:6c:69:6e:00:5a:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:34:98:54:37:52:2F:8E:9D:12:98:A5:90:A9:69:D9:91:53:76:88
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:13:c6:c9:af:41:af:f1:ce:da:65:ba:75:ee:4a:94:68:bf:
96:0b:96:1e:d7:84:bd:18:a1:03:f1:35:4d:dd:29:04:d5:5c:
dc:c3:72:3b:a0:53:ee:7c:74:53:0b:38:8a:d7:52:f4:8a:4b:
8d:24:6b:48:21:9d:8d:52:78:ba:a2:27:ba:7a:ae:c5:4d:da:
11:77:86:23:91:34:d0:1c:27:2e:eb:7e:78:00:dd:2f:b2:5b:
43:2b:57:7c:5a:63:80:ed:e8:88:05:bf:01:4a:c6:eb:f4:85:
81:3a:78:b5:be:f1:13:58:b9:fe:c5:8e:49:ac:9e:0f:13:1b:
d1:e2:d4:b0:9e:49:b0:74:36:e7:09:50:cf:77:cf:8a:84:44:
93:a5:ab:e5:a2:ac:02:83:c2:b9:ea:12:c3:b0:fa:68:b0:55:
c6:ae:58:99:7e:fd:32:b1:d3:70:2b:b4:68:5f:ae:80:1c:0a:
3d:ad:23:ae:1a:f0:66:46:d6:63:f3:12:f9:fe:f4:5c:a9:90:
17:54:1a:32:fe:cf:d0:69:9c:ed:09:b2:d2:4b:a0:d0:7d:ff:
a6:3b:98:15:63:c2:f1:f0:69:0e:aa:b6:f7:9d:c7:6f:4d:b1:
ba:47:5c:6b:32:b1:e6:3f:7c:2f:1f:db:03:2b:88:aa:32:88:
34:f6:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:00 2025 by rpki-client